This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/7je1rYLnLuvb6A7jMqzBVYyHn7U.roa File: 7je1rYLnLuvb6A7jMqzBVYyHn7U.roa (raw, json) Hash identifier: CrRdWWh2ccjKoJ37JUTkH6J1Di+iUQBg227VEldRzpQ= Subject key identifier: EE:37:B5:AD:82:E7:2E:EB:DB:E8:0E:E3:32:AC:C1:55:8C:87:9F:B5 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C80AFACB87EF3812B2DB5EEB9DDE379 Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/7je1rYLnLuvb6A7jMqzBVYyHn7U.roa Signing time: Fri 02 Jan 2026 02:19:26 +0000 ROA not before: Fri 02 Jan 2026 02:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204770 IP address blocks: 84.32.32.0/24 maxlen: 24 84.32.34.0/24 maxlen: 24 84.32.48.0/24 maxlen: 24 84.32.63.0/24 maxlen: 24 84.32.70.0/24 maxlen: 24 84.32.71.0/24 maxlen: 24 84.32.128.0/22 maxlen: 32 84.32.220.0/24 maxlen: 24 88.216.39.0/24 maxlen: 24 88.216.68.0/24 maxlen: 24 88.216.198.0/24 maxlen: 24 88.216.210.0/24 maxlen: 24 88.216.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:af:ac:b8:7e:f3:81:2b:2d:b5:ee:b9:dd:e3:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee37b5ad82e72eebdbe80ee332acc1558c879fb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:64:35:e4:a6:98:fc:86:05:8d:c2:7c:e6:b4: 68:23:4a:b9:89:d7:00:23:6a:5e:0b:44:dd:eb:15: 07:67:1e:4e:5a:a2:d0:d3:f0:be:8c:36:25:40:b1: 7b:c1:18:37:c0:6e:92:64:da:10:66:f3:29:d2:b7: 69:fa:10:fd:ef:9e:df:f4:c7:27:73:dc:10:e7:cb: 26:66:12:e1:05:3e:4c:47:68:17:75:2d:a8:37:e2: 88:f9:c6:b6:b1:de:af:a0:07:3e:fb:7f:7f:b0:a0: ab:4c:da:fa:95:9f:d9:e6:0d:e5:64:22:3a:49:ca: 73:98:43:01:aa:e8:9a:bc:52:16:ad:99:b2:b9:7f: 95:39:8a:3a:35:fc:15:b4:08:2b:38:c8:b1:2c:4c: c4:29:b5:8d:53:1a:f7:93:6b:20:b4:c3:64:6a:0f: 53:1e:e1:30:8c:f3:50:38:92:28:f4:9b:27:be:15: ab:36:90:6e:88:d0:78:3e:4a:28:b6:50:15:26:7d: 05:24:c3:f8:29:86:74:82:46:98:39:54:da:8a:c5: 87:d0:cf:52:f8:03:1a:52:cc:3d:f8:81:4a:4e:f1: e3:0d:1b:45:43:ea:63:05:76:ea:5f:7a:ad:b0:5d: 41:b9:41:ca:71:90:7f:05:be:b7:10:94:6e:0c:7d: 35:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:37:B5:AD:82:E7:2E:EB:DB:E8:0E:E3:32:AC:C1:55:8C:87:9F:B5 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/7je1rYLnLuvb6A7jMqzBVYyHn7U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.32.0/24 84.32.34.0/24 84.32.48.0/24 84.32.63.0/24 84.32.70.0/23 84.32.128.0/22 84.32.220.0/24 88.216.39.0/24 88.216.68.0/24 88.216.198.0/24 88.216.210.0/24 88.216.222.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:90:a6:73:90:44:cd:90:12:c0:db:38:8a:35:40:53:e1:32: 60:8e:35:c0:be:82:b8:eb:91:84:bd:7d:9a:4d:8c:51:2c:45: f2:56:be:aa:c6:79:36:5b:13:7e:1e:d1:fb:6b:04:a7:69:e9: ba:c7:15:df:c9:10:05:cd:0d:2e:18:ac:c2:77:1b:a0:6a:35: 18:de:bd:e8:e0:7b:c5:0c:ec:d1:fe:76:c4:cc:0e:bb:db:53: ef:50:5e:2f:fb:5a:bf:6d:74:13:bf:09:9f:e7:8e:57:fe:fb: 37:15:06:f2:34:41:f2:23:f8:07:d3:c6:eb:d1:df:50:31:a5: 9f:2e:bb:fd:88:3c:03:15:5b:90:d9:94:40:75:ee:ee:39:5e: 5b:1e:3f:3e:5f:5d:34:e3:a2:df:85:60:8b:c7:a2:f0:8e:c2: 0c:ce:f2:90:fb:6c:48:54:12:b4:70:05:e9:0e:70:59:d0:5b: 68:c5:bd:82:48:5f:28:1f:c2:0e:f1:0b:60:7d:b5:e7:ba:3a: 69:26:27:f0:e2:9c:01:af:fb:25:21:56:8a:82:21:16:eb:b2: 16:94:22:65:c0:4d:2f:e1:53:7f:b8:ed:6a:d3:24:23:8a:04: b1:b8:72:b9:78:f9:ae:dc:8f:ff:19:42:a9:9e:50:57:d0:3a: d7:52:2d:93 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZt8gK+suH7zgSstte653eN5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTM3YjVhZDgyZTcyZWViZGJlODBlZTMzMmFjYzE1NThjODc5ZmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWQ15KaY/IYFjcJ85rRoI0q5idcA I2peC0Td6xUHZx5OWqLQ0/C+jDYlQLF7wRg3wG6SZNoQZvMp0rdp+hD9757f9Mcn c9wQ58smZhLhBT5MR2gXdS2oN+KI+ca2sd6voAc++39/sKCrTNr6lZ/Z5g3lZCI6 ScpzmEMBquiavFIWrZmyuX+VOYo6NfwVtAgrOMixLEzEKbWNUxr3k2sgtMNkag9T HuEwjPNQOJIo9JsnvhWrNpBuiNB4PkootlAVJn0FJMP4KYZ0gkaYOVTaisWH0M9S +AMaUsw9+IFKTvHjDRtFQ+pjBXbqX3qtsF1BuUHKcZB/Bb63EJRuDH01swIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFO43ta2C5y7r2+gO4zKswVWMh5+1MB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvN2plMXJZTG5MdXZiNkE3ak1xekJWWXlIbjdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQAVCAgAwQA VCAiAwQAVCAwAwQAVCA/AwQBVCBGAwQCVCCAAwQAVCDcAwQAWNgnAwQAWNhEAwQA WNjGAwQAWNjSAwQAWNjeMA0GCSqGSIb3DQEBCwUAA4IBAQAtkKZzkETNkBLA2ziK NUBT4TJgjjXAvoK465GEvX2aTYxRLEXyVr6qxnk2WxN+HtH7awSnaem6xxXfyRAF zQ0uGKzCdxugajUY3r3o4HvFDOzR/nbEzA6721PvUF4v+1q/bXQTvwmf545X/vs3 FQbyNEHyI/gH08br0d9QMaWfLrv9iDwDFVuQ2ZRAde7uOV5bHj8+X10046LfhWCL x6LwjsIMzvKQ+2xIVBK0cAXpDnBZ0Ftoxb2CSF8oH8IO8QtgfbXnujppJifw4pwB r/slIVaKgiEW67IWlCJlwE0v4VN/uO1q0yQjigSxuHK5ePmu3I//GUKpnlBX0DrX Ui2T -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:13 2026 by rpki-client